Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3332203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32322d3332203d3e20323730383832.roa (raw, json)
Hash identifier:          5X/HGZaJntduB0rloOs2ZkTeac8x0CijUvlHCGu/6ZE=
Subject key identifier:   CA:DE:46:52:88:06:39:91:C2:11:0D:4B:5A:84:CE:9F:36:6C:C2:7C
Certificate issuer:       /CN=BC456BECD132A9F60B830E34664A12C5374676E9
Certificate serial:       57E99BBA52A289EF7387CFA12AE1DF36C6FF2FFC
Authority key identifier: BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3332203d3e20323730383832.roa
Signing time:             Thu 19 Mar 2026 15:35:22 +0000
ROA not before:           Thu 19 Mar 2026 15:30:22 +0000
ROA not after:            Thu 18 Mar 2027 15:35:22 +0000
asID:                     270882
IP address blocks:        186.194.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl
                          rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e9:9b:ba:52:a2:89:ef:73:87:cf:a1:2a:e1:df:36:c6:ff:2f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC456BECD132A9F60B830E34664A12C5374676E9
        Validity
            Not Before: Mar 19 15:30:22 2026 GMT
            Not After : Mar 18 15:35:22 2027 GMT
        Subject: CN=CADE465288063991C2110D4B5A84CE9F366CC27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:28:df:b3:0e:d3:79:57:1d:e1:6f:22:36:
                    3f:28:a5:38:b9:de:e0:da:ca:4e:76:f3:25:94:a3:
                    76:3e:32:d7:bb:c5:6d:b5:4a:59:2b:71:d3:33:6c:
                    5f:5b:2a:a7:8c:63:af:d0:a7:d6:cb:7f:93:d1:86:
                    c5:35:d5:b2:51:26:f2:73:9f:9e:a8:79:58:e0:16:
                    5e:ae:66:ff:ce:a9:11:e4:ef:ea:9f:d4:1d:9a:81:
                    46:09:5e:35:0d:e4:91:f8:28:2f:98:41:30:bb:b2:
                    03:49:9c:f1:4a:04:40:dd:81:f4:fa:29:de:f4:40:
                    4a:ba:bf:17:a5:8f:bd:f5:02:db:45:a6:4d:51:3d:
                    85:a7:1d:3a:40:f7:0e:53:5d:a9:14:d4:fd:0c:77:
                    42:b9:7c:e2:d9:56:f5:ae:7f:5f:6f:11:65:80:f9:
                    dd:06:6e:b6:28:cb:45:a9:96:b0:40:c8:3d:c2:3e:
                    0b:8c:bd:1b:2e:52:8a:55:a0:1d:06:98:7c:e7:a4:
                    84:ac:32:f5:9d:5e:96:03:40:c2:78:ae:b7:d9:e7:
                    60:b0:50:67:d1:25:92:47:89:93:aa:94:78:ca:67:
                    20:91:d0:99:88:ed:ee:03:0f:7b:f6:21:09:aa:08:
                    c5:10:ee:31:fd:f1:fd:18:3d:bd:1c:f9:16:30:42:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:46:52:88:06:39:91:C2:11:0D:4B:5A:84:CE:9F:36:6C:C2:7C
            X509v3 Authority Key Identifier:
                keyid:BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3332203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:d2:b4:c3:ad:23:3f:79:90:61:68:c4:21:23:ff:c1:9e:
         e6:61:c8:be:b1:3f:c5:49:cc:27:94:65:6e:18:fc:b1:06:c4:
         4b:24:14:dd:9a:5b:47:02:37:59:d1:24:2b:5c:b3:5a:e4:8e:
         13:f0:d3:35:b2:1c:fa:24:b4:fd:65:b8:f6:99:ae:d8:4f:8a:
         29:c2:a3:cd:d9:dc:f9:ed:7f:d3:85:c3:e7:e5:c4:89:36:a2:
         ed:76:0c:82:4c:34:5b:0f:5c:fc:2f:b6:95:55:a6:73:93:18:
         3e:a9:64:67:48:8e:a3:06:e2:ca:87:bb:14:bd:1f:88:0d:0c:
         cd:93:9e:e4:5e:47:ef:ba:c6:fb:66:6a:f8:80:52:6c:f8:31:
         7e:79:07:24:0b:c4:46:4d:d7:d0:a8:ee:5a:8b:19:67:6a:45:
         c2:bc:c6:f7:95:bc:44:fd:73:d3:1f:f0:21:14:1f:38:b5:e3:
         8e:82:bc:9f:ac:35:06:dc:d4:14:b0:3c:1d:06:59:2a:90:e5:
         07:4f:3e:3e:2f:91:7f:3e:e2:dc:92:e8:9e:ae:33:29:a1:14:
         db:0e:5d:ed:52:bd:0c:56:e5:6a:07:44:e0:6a:63:c2:18:98:
         d7:ba:1b:6d:43:a1:44:3b:1b:0e:a4:4e:c2:9a:23:b7:2a:8f:
         12:a4:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:45 2026 by rpki-client